Daily updates from Odoo
Monday, August 18, 2025
1 change
Security fixes and vulnerability patches
The Hong Kong payroll module now relies on a safer direct file field for Manulife MPF spreadsheet exports instead of a separate attachment link. This reduces security exposure while keeping the report file available for normal business use.
Original PR description
We remove the xlsx_attachment_id field on l10n_hk.manulife.mpf model as we can only use the Binary field xlsx_file. We did this choice because of security concerns, as Binary fields are a bit safer than Many2One. Linked:https://github.com/odoo/upgrade/pull/7713 task-4771722